User Manual TAP CURIOUS DO0281R01 • 9/4/2018
Table of Contents KUNBUS GmbH Table of Contents 1 Working safely ................................................................................................................................................ 3 2 Scope of delivery............................................................................................................................................ 4 3 Introduction..........................................................................................................................
Intended use The use of TAP CURIOUS described in these instructions serves to analyze Ethernet-based data flows. Using TAP CURIOUS for any alternative purpose is not envisaged and can lead to loss or damage. TAP CURIOUS must not be used for illegitimate or unlawful data espionage.
– Box – TAP CURIOUS – Power pack with Euro adapters – Plug for the power supply – Plug for the digital input and output – Operating instructions, Wireshark plugins and web server files on USB stick (the latest version can be found at www.kunbus.de/support.
The KUNBUS TAP CURIOUS is your network monitor for analyzing all standard industrial Ethernet solutions. Four probe ports allow you to capture up to two independent realtime Ethernet connections. You can use filters to reduce data volumes or select specific analysis data. You can configure these filters via an integrated web server. The web server can operate in 2 different modes. "Basic" mode helps you set your filters and configure your device.
Overview 4 Overview 1 2 3 6 4 5 Illustration 1: Front 1 Uplink port 3 Power LED 5 Monitoring ports (2 communication channels) DO0281R00 2 Link LED 4 Status LEDs for the 2 communication channels (5) 6 LEDs for filter and overflow 6 / 58
Overview 2 1 Illustration 2: Top 1 Port for the power supply 2 Digital input and output Each overview point is explained in the sections below.
TAP CURIOUS is connected to the power supply pack via a 5-pole plug. The plug is supplied as standard. 1 2 3 4 5 Illustration 3: Power supply The port is assigned as follows: Pin 1 2 3 4 5 Assignment DNC 20-28 V GND DNC PE The Power LED indicates whether or not TAP CURIOUS is connected to the power supply: DO0281R00 8 / 58 Overview 4.
Overview LED Power DO0281R00 Display off green Meaning TAP CURIOUS is not connected to the power supply. TAP CURIOUS is connected to the power supply.
TAP CURIOUS has a digital input and output. This is protected against reverse polarity. The terminal (Weidmüller BLZF 3.50/04/180 SN BK BX) designed for the digital input and output is supplied as standard. 1 2 3 4 The port is assigned as follows: Pin 1 2 3 4 DO0281R00 Assignment 20-28 V Digital output Digital input GND 10 / 58 Overview 4.
Overview 4.3 Uplink interface You can connect TAP CURIOUS to your PC via the uplink interface. To do this, you need an Ethernet cable with standard RJ45 plugs. If your PC does not have a free RJ45 port, you can use a USB adapter.
Overview LED Display CC-Link off green yellow flashing DO0281R00 Meaning No connection to the remote station Successfully connected to the remote station Communication running 12 / 58
TAP CURIOUS has 2 communication channels for monitoring the lines. Each of the ports Con 1 and Con 2, as well as Con 3 and Con 4, are connected directly to a communication channel. You can connect the ports to a device via an Ethernet cable with standard RJ45 plugs. Illustration 5: Test inputs Status LEDs signal the status of the individual ports: DO0281R00 13 / 58 Overview 4.
Overview DO0281R00 LED Con (A, B ,C, D) activity Display off green flashing red Con (A, B ,C, D) speed green yellow Meaning No communication Communication running Frame has been blocked by a filter (burn time 500 ms), it is not output via the uplink 100 Mbit/s mode 10 Mbit/s mode 14 / 58
You can apply filters to the frames. The LEDs are able to show these filter results. The "Filters [} 19]" chapter explains how this works.
TAP CURIOUS is able to monitor devices in various ways. 2 examples are shown here. Example 1: Connect your devices as shown to capture the communication between two devices. This allows you to find faulty frames on the network. Example 2: Connect your devices as shown to monitor the frames before and after a device throughput. In this example, device 2 is monitored.
◦ Unpack the device and make sure you have all the components listed in the scope of delivery. ◦ Connect the device to the power pack supplied. ð The POWER LED lights up. ◦ Load the "Wireshark" network analysis software onto the PC and install it. You can download Wireshark from www.wireshark.org. ◦ Download the Wireshark plugin.DLL from the KUNBUS website and copy the DLL file into the Wireshark plugin folder (e.g.: C:\Programs\Wireshark\plugins \1.10.2).
Information on the additional data can be found in the chapter called "Monitoring the interface [} 51]". DO0281R00 18 / 58 Starting TAP for the first time TAP CURIOUS expands the Ethernet packets by 20 bytes of additional information. You can use TAP CURIOUS without the plugin or with a different Ethernet analysis program. But you will not be able to analyze this additional information. You might also find that the analysis program reports a data packet as faulty due to this additional information.
Filters 7 Filters 7.1 Why do we use filters? TAP CURIOUS records all Ethernet frames transmitted on the connected network line. TAP sends the Ethernet frames to the connected PC via the "Uplink to PC" port. Wireshark writes these frames to the main memory (RAM) on your PC. This not only makes it more difficult for your to monitor data, it can also overload the main memory and cause your PC to crash. To prevent this from happening, you can set various filters for each probe port.
Filters You can set a total of 5 filters per probe port.
Filters 7.2 Setting filters Requirements: ü Wireshark is installed on your PC. ü TAP CURIOUS is properly connected. ◦ Open the Network and sharing center on your PC. ◦ Click on "Change adapter settings". ◦ Double-click to open the network connection for your TAP CURIOUS. ◦ Click on "Properties" ◦ Activate the "IPv4" protocol. You need this protocol to configure filter settings via the web server. ◦ Open Wireshark ◦ Select the network connection for TAP CURIOUS.
"Edit Registers (Expert)" mode is the right mode for you if you are already closely familiar with the structure of an Ethernet frame. "Filter Basic" mode is the right mode for you if you do not deal with this topic so often and feel you need a little more support. A detailed list of the parameters for filter settings and the TAP CURIOUS configuration can be found in the chapter called "Tabulated list of filters and configuration registers [} 36]".
Filters 7.2.1 Settings in Basic mode Basic mode is the right mode for you if you want to set filters in the easiest way possible or feel you need a little support. Filter settings you would make in multiple registers in Expert mode can be made here from just one menu option. ü Your TAP CURIOUS is properly installed. ü Your network connection for TAP CURIOUS is active. ü You have opened the web server. ◦ Click on "Filter basic" ð Basic mode will open.
Filters To use any filter setting, you need to have activated the filter and saved the settings. Do this by clicking on "On" and then "Save". You can set the following filters: Dest. address filter This is where you can set frames that are transmitted to a particular MAC address. Enter the MAC address you require. Check the "Set filter > Negate" box to filter all frames that are not transmitted to this MAC address. You can combine the filter with the external input.
Filters Check the "Set filter > Negate" box to filter all frames that do not match the selected Ethernet type. You can combine the filter with the external input. Do this by checking the "External input > Yes/No" box. Check the "External input > Negate" box if the external input has to be "low". IPv4 Dest. address filter This is where you can set frames that are transmitted to a particular IP address. Enter the IP address you require.
Filters Configuring TAP CURIOUS ◦ Click on the "Configuration" register. The basic settings for TAP CURIOUS will be displayed. You can also change certain values: Device information The following device information appears in "Device info": – Serial number of TAP CURIOUS – Software version – MAC address These data are specified by KUNBUS for this device and cannot be changed. Please have these data to hand if you report a problem to our support.
– Gateway address You can set the gateway address here. Using DHCP If you use a DHCP server, it can assign a free IP address to TAP CURIOUS. Setting outputs filters The "Reset with timer" menu allows you to reset one of the filter LEDs or the external output after a selected time. ◦ In the "Switch off delay in ms" field, enter a time after which you want the output to be reset.
Filters 7.2.2 Settings in Expert mode If you are closely familiar with the structure of Ethernet frames, you can use Expert mode to configure TAP CURIOUS and set the filters. Setting filters ü Your TAP CURIOUS is properly installed. ü Your network connection for TAP CURIOUS is active. ü You have opened the web server. ◦ Click on the register of a port on which you want to set filters (e.g. B. "CON A"). Set your filters here.
Filtering by protocol types IP4 and IP6 Filters Register Parameter SegFilter1: x10 00 00 00 01 x11 00 00 45 23 x12 00 00 FF FF Filter 1: x55 00 00 00 00 x56 00 00 00 03 Uplink: x65 00 00 00 00 x66 00 00 00 01 Config reg: 401 xx xx xx xE 401 xx xx xx xD 401 xx xx xx xB 401 xx xx xx x7 Function Word offset of the rest of the MAC address Last 2 bytes of the MAC address Mask on the first 2 bytes No negation of SegFilter1 and 2 Filter1 consists of SegFilter1 and 2 Do not invert output Frame is output at the u
Filters Filtering by the source MAC address Input field for Src address: 6 bytes Example: You want to filter all frames that have been transmitted from the MAC address C8 3E A7 02 32 AB.
Filters Register Parameter Function SegFilter1: x16 00 00 00 02 Word offset of the rest of the source MAC address x17 AB 32 02 A7 Last 2 bytes of the source MAC address x18 FF FF FF Mask on all bits FF Filter 1 x55 00 00 00 00 No negation of SegFilter1 and 2 x56 00 00 00 03 Filter1 consists of SegFilter1 and 2 Filter 2 x57 00 00 00 00 No negation of SegFilter3 and 4 x58 00 00 00 0C Filter2 consists of SegFilter3 and 4 Uplink x65 00 00 00 00 Do not invert output x66 00 00 00 03 Frame is output at the uplink
Filters (IPv4 0x0800 ) Filtering by the target IP address Input field for target IP address: 4 bytes Example: You want to filter the target IP address "01 02 03 04".
Example: You want to filter by protocol type IPv4 and set the external output if a frame with protocol type IPv4 arrives. Protocol type IPv4 corresponds to 0x0800.
Filters Example: You want to filter all frames that are 1012 bytes long. Filtering by frame length Set the following filter registers: Register State: x05 x06 Filter 1 x55 x56 Uplink x65 x66 ConfigReg 401 Parameter Function 00 00 03 F4 Frame is 1012 bytes long (0x03F4) 00 00 FF FF Mask on 2 bytes 00 00 00 00 No negation of StateFilter 80 00 00 00 Filter1 consists of state filter 00 00 00 00 Do not invert output 00 00 00 01 Frame is output at the uplink port if filter 1 applies.
Filters Configuring TAP CURIOUS ◦ Click on "Config settings > Show settings". Device information Device information is displayed in the first line: – Serial number of TAP CURIOUS – Software version – MAC address These data are specified by KUNBUS for this device and cannot be changed. Please have these data to hand if you report a problem to our support. Connection settings You can select the connection speed for all ports in the "Channel mode" menu. The default speed is 100 Mbit.
Filters 7.3 Tabulated list of filter registers A tabulated overview of all filter registers can be found in this chapter.
x05-State_TargetReg Byte 1 2 3 4 DO0281R00 Name of the register SegFilter13_PosReg SegFilter13_TargetReg SegFilter13_MaskReg SegFilter14_PosReg SegFilter14_TargetReg SegFilter14_MaskReg SegFilter15_PosReg SegFilter15_TargetReg SegFilter15_MaskReg SegFilter16_PosReg SegFilter16_TargetReg SegFilter16_MaskReg Filter1_NegReg Filter1_MaskReg Filter2_NegReg Filter2_MaskReg Filter3_NegReg Filter3_MaskReg Filter4_NegReg Filter4_MaskReg Filter5_NegReg Filter5_MaskReg Gbit_Filter_NegReg Gbit_Filter_MaskReg ExOut_
x07, x10 … x49, x52SegFilterXX_PosReg Byte 1 2 3 4 Bit 0-31 Byte Bit 1 0-15 2 Filters x06-State_MaskReg Description Filter mask Value = 0: → Bit ignored Value = 1: → Bit considered Description Byte offset for 4 bytes in the frame Offset = 0 → [01 00 5e 6e] ed c2 00 24 01 3a b6 c1 08 00 45 00 Offset = 1 → 01 00 5e 6e [ed c2 00 24] 01 3a b6 c1 08 00 45 00 Offset = 2 → 01 00 5e 6e ed c2 00 24 [01 3a b6 c1] 08 00 45 00 Offset = 3 → 01 00 5e 6e ed c2 00 24 01 3a b6 c1 [08 00 45 00] x08, x11 … x50, x53Seg
x56, …, x64-FilterX_MaskReg Bit 0 1 2 3 4 5 6 7 Description Reserved Reserved Reserved Reserved Ext.
Byte 1 2 3 4 x 66-Gbit_Filter_MaskReg Byte 1 2 3 4 x68-ExOut_Filter_MaskReg Byte 1 2 3 4 DO0281R00 Bit 0 1 2 3 4 5 6 7 0-7 0-7 0-7 Description Negate result of Filter 1 Negate result of Filter 2 Negate result of Filter 3 Negate result of Filter 4 Negate result of Filter 5 Reserved Reserved Reserved Reserved Reserved Reserved Bit 0 1 2 3 4 5 6 7 0-7 0-7 0-7 Description Frame is sent if filter 1 applies Frame is sent if filter 2 applies Frame is sent if filter 3 applies Frame is sent if filter 4 ap
Byte 1 2 3 4 x70LED0_LED2_Filter_MaskReg Byte 1 2 3 DO0281R00 Bit 0 1 2 3 4 5 6 7 0 1 2-7 0-7 0-7 Bit 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 Filters x67-ExOut_Filter_NegReg Description Set the external output if filter 1 does not apply Set the external output if filter 2 does not apply Set the external output if filter 3 does not apply Set the external output if filter 4 does not apply Set the external output if filter 5 does not apply Reset the external output if filter 1 does not apply
x69-LED0_LED2_Filter_NegReg Bit 0 1 2 3 4 5 6 7 Description Set LED2 if filter 5 applies Reset LED2 if filter 1 applies Reset LED2 if filter 2 applies Reset LED2 if filter 3 applies Reset LED2 if filter 4 applies Reset LED2 if filter 5 applies Reserved Reserved Byte 1 Bit 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 Description Set LED0 if filter 1 does not apply Set LED0 if filter 2 does not apply Set LED0 if filter 3 does not apply Set LED0 if filter 4 does not apply Set LED0 if fi
Byte 1 2 3 4 x71-LED3_LED4_Filter_NegReg DO0281R00 Byte 1 Bit 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 Description Set LED3 if filter 1 applies Set LED3 if filter 2 applies Set LED3 if filter 3 applies Set LED3 if filter 4 applies Set LED3 if filter 5 applies Reset LED3 if filter 1 applies Reset LED3 if filter 2 applies Reset LED3 if filter 3 applies Reset LED3 if filter 4 applies Reset LED3 if filter 5 applies Set LED4 if filter 1 applies Set LED4 if filter 2 applies Set LED4
Bit 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 3 4 Filters Byte 2 Description Reset LED3 if filter 4 does not apply Reset LED3 if filter 5 does not apply Set LED4 if filter 1 does not apply Set LED4 if filter 2 does not apply Set LED4 if filter 3 does not apply Set LED4 if filter 4 does not apply Set LED4 if filter 5 does not apply Reset LED4 if filter 1 does not apply Reset LED4 if filter 2 does not apply Reset LED4 if filter 3 does not apply Reset LED4 if filter 4 does not apply Reset LED4 if fi
Byte 1 Bit 0-3 Filters 402-extOut_ConfigReg Description 0001 →0x1 -> X1.1 active port for setting the ext. out 0010 →0x2 -> X1.2 active port for setting the ext. out 0100 →0x3 -> X2.1 active port for setting the ext. out 4-7 1000 →0x4 -> X2.2 active port for setting the ext. out 0001 →0x1-> X1.1 active port for resetting the ext. out 0010 →0x2 -> X1.2 active port for resetting the ext. out 0100 →0x3 -> X2.1 active port for resetting the ext. out 1000 →0x4 -> X2.2 active port for resetting the ext.
Byte 1-4 Bit 0-5 Filters 404-LED_ConfigReg Description Reset the LEDs via timer (switch-off delay), high-active ( 000001->LED0, 000010->LED1, 000100->LED2, 001000>LED3, 6-11 010000->LED4) Reset the LEDs, high-active Possible only when reset via timer is not active ( 000001->LED0, 000010->LED1, 000100->LED2, 001000>LED3, 010000->LED4) 12-15 LED reset via timer must not be activated. Specify the active port for which LED0 is set.
Byte 1-4 Bit 0-3 Filters 405-LED_Config2Reg Description Specify the active port for which LED0 is reset. 0001 → Con A 0010 → Con B 0100 → Con C 4-7 1000 → Con D Specify the active port for which LED1 is reset. 0001 → Con A 0010 → Con B 0100 → Con C 8-11 1000 → Con D Specify the active port for which LED2 is reset. 0001 → Con A 0010 → Con B 0100 → Con C 12-15 1000 → Con D Specify the active port for which LED3 is reset.
Byte 1-4 0-31 Bit Delay until LED3 is reset. Filters 409-LED3-TimerReg Description Input is in 10ns increments. For example, 0x1312D00 corresponds to 200 ms. 410-LED4-TimerReg Byte 1-4 Bit 0-31 Description Delay until LED4 is reset Input is in 10ns increments. For example, 0x1312D00 corresponds to 200 ms.
Wireshark is a free analysis program for network communication connections. It allows you to: – Show data traffic across an Ethernet interface after or during capture in the form of data packets, – observe individually captured data packets, – sort data packets according to specific contents, – extract binary contents (e.g. images), – create and work-up data flow statistics. The free program library "WinPcap" permits the transparent capture of data traffic under Microsoft Windows®.
Monitoring the interface Status window The status window consists of 3 areas: – Packet list, – Packet details, – Packet raw data. Packet list Wireshark displays all data packets in chronological order here. As soon as the KUNBUS TAP spy plugin is activated, Wireshark will apply in the "Time" column the highly-precise time stamp from TAP CURIOUS instead of the timestamp from the operating system. Specific values from TAP CURIOUS can be displayed in additional columns.
Once the TAP plugin is activated and Wireshark has captured the Ethernet packets via TAP CURIOUS, you can see additional information in the lowermost line in the "KUNBUS-TAP" section: Number of bytes Content 4 bytes FCS (original checksum). Identifier C8 3E A7 00 01 61. Port on which the frame was received. Port Value in hex. Con A 0x80 Con B 0x40 Con C 0x20 Con D 0x10 1 Byte Error messages Bit Error message Bit 7 Receive error 8 bytes Packet raw data DO0281R00 Bit 6 Signal not decoded.
You can refresh the web server whenever an update is available. Requirements: ü TAP CURIOUS is connected to your PC. ü You have installed an FTP server on your PC. ü You have Internet access. ◦ Download the update from our website. The latest version can always be found at: http://tap.kunbus.de. ◦ Save the update files on your PC. ◦ Open your FTP server. Note! In this example, we use FileZilla. If you use a different FTP server, the steps you see may differ due to the software. ◦ Click on "File".
Refreshing the web server ◦ Enter a name for the server (e.g. TAP CURIOUS). ◦ Enter the following values in the "General" register: Server Protocol Encryption Connection type User Password IP address of your TAP CURIOUS "FTP- File Transfer Protocol" "Use unencrypted FTP" "Normal" Admin 1701 It might not be possible to establish a connection due to the proxy settings. If this is the case, click on the "Advanced" register and check the "Bypass proxy" box. ◦ Click on "Edit". ◦ Select "Settings".
Refreshing the web server ◦ Enter a "1" into the "Maximum number of simultaneous transmissions" box. ◦ Click on "OK" ◦ Click on the selection arrow next to the network settings. ◦ Select the connection for TAP. ◦ Click on "Connect".
Refreshing the web server ð The update files will now be copied to your TAP CURIOUS. FileZilla allows you to track progress in the queue. You can also see which files have been successfully transmitted and which encountered an error.
Problem No link between the devices. Solution The TX and RX lines are interchanged between the ports (crossover). If the used devices do not have AutoMDI-X, a crossover cable has to be used on one side. Wireshark does not show In the "Capture > Options" configuration dialog, activate all packets. "Capture packets in promiscuous mode". Some network cards filter out certain packet types that Wireshark is unable to display. This can be solved only by using a card from a different manufacturer.
Technical Data 11 Technical Data Size/weight Width Height Depth Weight 91.4 mm 139.7 mm 27.9 mm approx.
Technical Data Example 2: Connect your devices as shown to monitor the frames before and after a device throughput. In this example, device 2 is monitored. Here, you could analyze the following: – Measure the device throughput time, – Check whether frames have been distorted or truncated, – Measure jitter on cyclical frames.
